$ rpki-client -vvvf rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft File: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft (raw, json) Hash identifier: CRxHQZ/g156QIpA/eDYmhfBQ+yXJwC2ujWXgchyqyT8= Subject key identifier: 88:8A:97:87:0F:AC:77:41:19:05:31:CD:C3:5F:D5:B9:06:C5:8F:24 Authority key identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD Certificate issuer: /CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD Certificate serial: 79826266893C5997C33A35D5AFE6D5783B444C39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:55:08 +0000 Manifest this update: Tue 22 Sep 2026 02:50:08 +0000 Manifest next update: Wed 23 Sep 2026 05:05:08 +0000 Files and hashes: 1: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl (hash: ac8guwiRVORBB65NbUuBTFVCUVg+Y9ZbjUrG0+XhN5k=) 2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: guRu9prdmx+ch78kv34z9AVOzBlrJNlWUYpJ/aaI38s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:82:62:66:89:3c:59:97:c3:3a:35:d5:af:e6:d5:78:3b:44:4c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD Validity Not Before: Sep 22 02:50:08 2026 GMT Not After : Sep 23 05:05:08 2026 GMT Subject: CN=888A97870FAC7741190531CDC35FD5B906C58F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:0d:01:ae:b4:f8:77:c4:2b:96:d7:0e:05: 4d:df:a9:32:7f:87:36:d6:ab:ea:6c:14:ff:d9:d8: a8:e8:97:74:f0:68:1e:19:60:dc:6b:7b:22:69:32: 43:3e:fa:01:58:02:60:67:08:a6:c2:ac:64:9f:4d: 7f:4b:f1:9a:8d:e8:36:a4:5d:f4:05:38:0b:99:20: 15:df:95:6e:03:90:de:d4:e9:30:17:57:6d:e2:1a: c7:33:01:d4:b3:55:3c:c3:e5:10:5f:88:88:d3:a1: 9c:c6:39:7f:cc:ef:cc:0a:87:2d:bb:5f:af:cc:55: 81:77:45:ce:a9:e6:e1:50:58:e1:4d:78:c4:1a:83: db:b7:45:64:0d:0e:ab:90:f0:49:bb:c2:55:25:f0: 1d:5c:87:19:5e:81:67:de:5d:73:02:fb:a1:6f:a5: 13:ae:31:c3:cf:9f:0a:9e:23:5d:3a:b3:fb:8a:b5: 9b:8f:8a:ec:28:ec:14:ec:90:81:7f:12:de:cf:6f: 21:20:58:05:ef:0f:40:c4:6e:27:19:a1:f5:b2:0d: 8e:db:a4:64:e4:84:12:a4:88:11:cf:33:3c:c7:29: 77:bb:f7:75:54:8c:0b:bd:8d:c1:f2:70:dc:05:37: 05:bc:64:b9:45:4f:73:69:94:df:79:f5:e1:a2:1e: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:97:87:0F:AC:77:41:19:05:31:CD:C3:5F:D5:B9:06:C5:8F:24 X509v3 Authority Key Identifier: keyid:B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e4:a2:e0:ef:e2:bc:05:e6:ac:69:4f:fe:95:ec:05:d3:99: 52:78:59:81:cc:18:d4:c3:e6:93:87:c3:13:e4:12:c4:ee:f4: 6c:70:7e:3c:ab:63:7b:63:dd:78:2f:ec:d6:d7:07:82:d0:0a: a1:8d:40:8c:24:f5:bb:33:b5:fd:a7:03:14:ba:18:1d:9d:3b: 2a:61:fc:be:3d:6e:34:10:18:54:d0:95:c4:1c:95:f9:4f:36: eb:06:4a:1f:72:19:3c:4c:59:31:67:69:08:0a:ef:96:2e:c7: d2:c7:a6:aa:46:b3:f5:22:7a:72:70:58:69:08:74:00:52:dc: da:bf:14:55:f6:0e:aa:a2:72:e6:86:29:cb:db:19:f9:c6:8a: 5e:c9:0c:20:c0:3d:a5:85:eb:cc:ae:4b:54:ca:1b:9e:67:c9: 6e:0c:b1:23:15:c6:c0:e2:f2:9b:41:0f:15:a0:90:c6:21:ad: 99:64:93:9f:c1:7c:46:81:dc:ed:80:2e:60:17:f9:bc:15:bb: fa:42:22:d1:3f:6d:66:90:d4:52:44:36:4a:ee:27:21:0d:6a: 0e:b2:27:23:f6:5c:98:16:10:6e:3b:42:b2:81:4d:70:f6:01: 85:77:ff:42:c5:93:ac:91:e8:c1:e5:2d:66:66:d4:dc:e4:a3: b5:99:d4:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYJiZok8WZfDOjXVr+bVeDtETDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCODBFMTBBNUIwQUFCQTI0OTI5RTMzQ0RFRjkxMjk1 OUE2RTRGRDAeFw0yNjA5MjIwMjUwMDhaFw0yNjA5MjMwNTA1MDhaMDMxMTAvBgNV BAMTKDg4OEE5Nzg3MEZBQzc3NDExOTA1MzFDREMzNUZENUI5MDZDNThGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspA0BrrT4d8QrltcOBU3fqTJ/ hzbWq+psFP/Z2Kjol3TwaB4ZYNxreyJpMkM++gFYAmBnCKbCrGSfTX9L8ZqN6Dak XfQFOAuZIBXflW4DkN7U6TAXV23iGsczAdSzVTzD5RBfiIjToZzGOX/M78wKhy27 X6/MVYF3Rc6p5uFQWOFNeMQag9u3RWQNDquQ8Em7wlUl8B1chxlegWfeXXMC+6Fv pROuMcPPnwqeI106s/uKtZuPiuwo7BTskIF/Et7PbyEgWAXvD0DEbicZofWyDY7b pGTkhBKkiBHPMzzHKXe793VUjAu9jcHycNwFNwW8ZLlFT3NplN959eGiHvlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIqXhw+sd0EZBTHNw1/VuQbFjyQwHwYDVR0j BBgwFoAUsbgOEKWwqrokkp4zze+RKVmm5P0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDg5ODVmNTktMGVlNi00MjA4LTlhOTAtMjljMTA4NjAwY2ZjLzAvQjFCODBFMTBB NUIwQUFCQTI0OTI5RTMzQ0RFRjkxMjk1OUE2RTRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMUI4MEUxMEE1QjBBQUJBMjQ5MjlFMzNDREVGOTEyOTU5QTZF NEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvQjFCODBFMTBBNUIwQUFCQTI0OTI5RTMzQ0RFRjkx Mjk1OUE2RTRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfkouDv4rwF5qxpT/6V7AXTmVJ4WYHMGNTD 5pOHwxPkEsTu9GxwfjyrY3tj3Xgv7NbXB4LQCqGNQIwk9bsztf2nAxS6GB2dOyph /L49bjQQGFTQlcQclflPNusGSh9yGTxMWTFnaQgK75Yux9LHpqpGs/UienJwWGkI dABS3Nq/FFX2DqqicuaGKcvbGfnGil7JDCDAPaWF68yuS1TKG55nyW4MsSMVxsDi 8ptBDxWgkMYhrZlkk5/BfEaB3O2ALmAX+bwVu/pCItE/bWaQ1FJENkruJyENag6y JyP2XJgWEG47QrKBTXD2AYV3/0LFk6yR6MHlLWZm1Nzko7WZ1As= -----END CERTIFICATE-----Generated at Tue Sep 22 17:26:25 2026 by rpki-client